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Alert Messages, Severity 1 



The following messages appear at severity 1, alerts: 

%PIX-1-101001: (Primary) failover cable OK. 
%PEX-1-101002; (Primary) Bad failover cable. 
%PIX-1-101003: (Primary) failover cable not connected (this unit). 
%PIX-1-101004: (Primary) failover cable not connected (other unit). 
%F1X-1-101005: (Primary) Error reading failover cable status. 
• %PDC-1-102001: (Primary) Power failure/System reload other side. 
%PDC-1-103001: (Primary) No response from other firewall. 
%FIX-1-1G3002: (Primary) Other firewall network interface chars OK. 
%PIX-1-103003: (Primary) Other firewall network interface chars failed. 
%PIX-1-1G3004: (Primary) Other firewall reports this firewall failed. 
%PIX-1-103C05: (Primary) Other firewall reporting failure. 
%PIX-1-104001: Secondary: Switching to ACTIVE (cause: chars). 
%PIX-1-104002: (Primary) Switching to STNDBY. 
%PIX-1-104003: (Primary) Switching to FAILED. 
%PIX-1-104004: (Primary) Switching to OK 
%PIX-1-105001: Disabling failover. 
%PIX-1-105002: Enabling failover. 
%PIX-1-1G50G3: Monitoring on interface dec waiting. 

%PIX-1-1050Q4: Monitoring on interface dec normal 

%PIX-1-1 05005: Lost failover communications with mate on interface dec. 

%PIX-1-105006: Link status 'Up' on interface dec. 

%PIX-1-105007: Link status 'Down' on interface dec. 

%PIX-1-105008: Testing interface dec. 

%PIX-1-105009: Testing interface dec chars. 

%PIX-1 -105020: ( chars) Incomplete/ slow config replication 

%PIX-1-302001: Built TCP connection for faddr D?_addr/port gaddr IP_addr/port 

laddr IP_addr/port (chars) 

%PIX-l-709003: (chars) Beginning configuration replication: Send to mate. 

%PIX-l-709004: (chars) End Configuration Replication (ACT) 

%PIX-l-709005: (chars) Beginning configuration replication:Receiving from mate. 

Critical Messages, Severity 2 

The following messages appear at severity 2, critical: 

%PIX-2-106001: Inbound TCP connection denied from IP_addr/port to 
IP_addr/port flags chars 

%PIX-2-l 06002: TCP Connection denied by outbound list dec src IP_addr/port 
dest IP_addr/ port 

%PIX-2-106003: Connection denied src IP_addr dest IP.addr due to JAVA Applet. 
%PIX-2-106006: Deny inbound UDP from IP_addr/port to IP_addr/port 
%PIX-2-106007: Deny inbound UDP from IP_addr/port to IP_addr/port due to 
DNS query/ response. 

%PIX-2-106008: Translation for IP_addr denied by outbound dec 
%PIX-2-106009: Translation for IP_addr to IP_addr denied by outbound dec 
%PIX-2-106012: Deny IP from IP.addr to IF_addr, IP options hex. 
%PIX-2-106013: Dropping echo request from IP_addr to PAT address IP„Addr 
%PIX-2-106014: Deny inbound icmp src interface name: IP_addr dst interface 
name: IP_addr (type dec, code 
dec) 

%PIX-2-106015: Deny TCP (no connection) from IP_addr/port to IP_addr/port 
flags. 

%PIX-2-X06016: Deny IP spoof from IP.addr to IP_addr, IP options hex. 
%PIX-2-106017: Packet contains ActiveX content and has been modified src 
IP_addr dest to IP_addr, IP options 
hex. 

%PIX-2-108001: SMTP made noop: out chars in chars data: chars 
%PIX-2-108002: SMTP replaced chars: out chars in chars data: chars 
%PIX-2-109009: Authorization denied from IF_addr/port to IP_addr/port (not 
authenticated) 

%PIX-2-109011: Authen Session Start: user 'user 1 , sid session_.num 

%PIX-2-110003: No interface is configured (with chars). 

%PIX-2-112001: (chars:dec) PIX clear finished. 

%PIX-2-199004: PIX clear config char from char. 

%PIX-2-201003: Embryonic limit exceeded dec/ dec for IP_addr/port 

(IP_addr)IP_addr/port . 

%PIX-2^304006: URL Server went OFFLINE 




• 



Error Messages, Severity 3 

The following messages appear at severity 3, errors: 

%FIX-3-105010: host failover message block alloc failed 
%FIX-3-106ul0: Deny inbound from outside:IP_addr to inside:IP_addr chars, 
%PIX3-109010: Auth from IP_addr/port to IP_addr/port failed (too many 
pending sums) 

%PIX-3-109013: User must authenticate before using this service 
%FD04-110002: No ARP for host IP.addr 
%PDW-2O10Ol: Out of connections! dec/ dec. 
%PIX-3-201002: Too many connections on static IP^addr 
%FDM-201QQ5: FTP data connection failed for ipjuldr. 
%PIX-3-2O10O6: RCMD back connection failed for IP_addr/port 

%PIX-3-201007: Unable to allocate new UDP connections (IP addr/port- 
IP_addr/pcrt) 

%PIX-3-201008: The PIX is disallowing new connections. 
%PDC-3-202001: Out of address translation slotsl 
%PIX-3-202002: Unable to find translation for incoming IP_addr. 
%PIX-3-202002: Unable to find translation for SRC»IF_addr DEST«IP_addr IP 
octal inside | outside. 

%PDC3-2020Q3: Could not build translation for IP_addr. 
%PIX-3-202004: Could not build portmap translation for IP_addr. 
%PDW-203001: ESP Error: No Key SPI hex SRC IP^addr DEST EP_addr 
%PDC3-208005: (chars: dec) pix clear return dec 
%PDC-3-304003: URL Server IP.addr timed out URL string 
%PIX-3-3040O4: URL Server IP_addr request failed URL chars 
%PIX-3-304006: URL Server IP_addr not responding, trying IP_addr 
%PIX-3-304007: URL Server IP_addr not responding, ENTERING ALLOW mode 
%PIX^304003: Leaving ALLOW mode, URL Server IP.addr 
%PIX-3-305005: No translation group found for. protocol 

Warning Messages, Severity 4 

Currently, FIX Firewall does not generate severity 4, warning, 
Syslog messages. 

Notification Messages, Severity 5 

The following messages appear at severity 5, notifications: 

%PIX-5-l 09012: Authen Session End: user 'user', sid session_num, elapsed 
nun\_seconds seconds 

%PIX-5-111001: Begin configuration: chars writing to chars 
%PIX-5-111002: Begin configuration: source reading from device 
%PIX^5-111003: chars erase configuration 
%PIX-5-111004: chars end configuration: FAILED | OK 
%PIX^5-1U005: chars end configuration: OK 
%PIX^5-111006: Console login from chars at chars 
%PIX-5-111007: Begin configuration: chars reading from chars. 
%PIX^-111008: User 'chars' executed the 'chars' command. 
%PIX-5-199001: PIX reload command executed from IP_addr. 
%PIX^5-3040G2: Access denied URL chars SRC IP.addr DEST IP.addr: chars 





Informational Messages, Severity 6 

The following messages appear at severity 6, informational: 

J5£S!222 ! AUth rtart for ,char3 ' ft0,n n'-oddr/port to IP addr/port 
WDbUOm* Auth from IP_ a ddr/ P ort to VM/rSuUi^SSlSL 

ff!3SS? Authent,Catlon «««" ™« W from IP.addr/port to 
SSport 06 ' AuthenUcation from IP_addr/port to 

?2J5S? Auth0ri2aa0nd ^f— WfromIP_addr/pcrtto 
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%PIX-6-302003: Built H245 connection for faddr IP_addr laddr IP_addr/port 
%PIX-6O02004: Preallocate H323 UDP backconnection for faddr i_addr to laddr 
IP_addr/port 

%PIX-6302005: Built UDP connection for faddr IP_addr/port gaddr IP_addr/port 
laddr IP_addr/ port 

%PIX-6n302006: Teardown UDP connection for faddr IP_addr/port gaddr 
IP_addr/port laddr IP__addr/port duration 
time bytes dec (chars) 

%PIX-6-302009: Rebuilt TCP connection %d for faddr IP_addr/ port gaddr 
EP_addr/ port laddr IP.addr/ port 
%PIX-6^03002: IP__addr retrieved IP.addrxhars 
%PIX-6-304001: IP_addr accessed IP_addrchars. 

%PIX-6-3G5001: Portmapped translation built for gaddr IP_addr/port laddr 
IF_addr/port (chars) 

%PDC-6^305002: Translation built for gaddr IP_addr to IP_addr 
%PIX-6-3050Q3: Teardown translation for IP_addr (lP.addr) 
%PIX-6-305004: Teardown portmap translation for global IP_addr/port local 
IP_addr/port 

%PIX-6-305007: Orphan IP IP_addr on interface dec 
%PIX-6-307001: Denied Telnet login session from IP_addr. 
%PIX-6-307002: Permitted Telnet login session from IP_addr. 
%PIX-6-307003: Telnet login session failed from IP_addr (3 attempts). 
%PIX-6-308Q01: PIX console enable password incorrect for 3 tries from IP_addr. 
%PIX-6-309001: Denied manager connection from IP_addr. 
%PIX-6-309002: Permitted manager connection from IP_addr. 

Debugging Messages, Severity 7 

The following messages appear at severity 7, debugging: . 

%PIX-7-106011: Deny self route chars . 

%PIX-7-304005; URL Server IF_addr request pending URL chars 
%PIX-7-305006: type translation creation failed for protocol 
%PIX-7-701001: alloc_user() out of Tcp_user objects 
%PIX-7-709001: (chars) Rep CI ioctl (chars) return chars 
%PIX-7-709002: (chars) Rep no replication chars 
%PIX-7-709006: (chars) End Configuration Replication (STB) 
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